And humans are happily fooled by conditions (optical illusions, rain) in ways that wouldn't fool machines.

https://xkcd.com/1958/

If you want to murder people on the roadway, there are lots of ways to do this that are easier than fancy adversarial attacks (which only fool one sensor type, at best... and are then patched).